$ rpki-client -vvf rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft File: pXN62XE221PCG287HU13Hc1XMTo.mft (raw, json) Hash identifier: tIX41fS3SA/OLL7UVlBg32kKlmXjFUJ7Xlq9DlGeK+4= Subject key identifier: 26:BD:9E:86:96:84:98:2C:45:06:22:16:27:FF:C8:89:0C:34:58:10 Authority key identifier: A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A Certificate issuer: /CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Certificate serial: 0433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft Manifest number: 042B Signing time: Wed 05 Nov 2025 00:26:27 +0000 Manifest this update: Wed 05 Nov 2025 00:26:27 +0000 Manifest next update: Wed 12 Nov 2025 00:26:27 +0000 Files and hashes: 1: pXN62XE221PCG287HU13Hc1XMTo.crl (hash: ds3bKl07OzPHjLeRtyeLwkf3a5sY35do+NNNdm9FyOs=) 2: EE23EF6E857B11ECA3F32D50C4F9AE02.roa (hash: 2pNsdUTXJ21ZMGMJibEjsxpDH0Z9Fw35noblZo6xKpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1075 (0x433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146F33, serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A Validity Not Before: Nov 5 00:26:27 2025 GMT Not After : Nov 12 00:26:27 2025 GMT Subject: CN=690a99b3-6957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:1f:1d:88:9c:51:74:58:2f:6c:e1:68:bd: d5:de:dc:b0:69:76:5a:47:8d:52:a6:d3:09:1d:10: 3f:b2:78:e0:5f:82:cb:a2:d1:a8:01:92:96:45:7d: ed:a2:c1:e7:b5:5e:8a:35:54:17:dd:30:60:fb:00: 72:14:57:2a:25:29:f5:66:1f:94:17:00:4f:d3:e1: b6:c0:8c:75:94:f1:18:38:bc:7e:08:58:4b:df:35: 03:1d:50:e0:ad:85:2d:39:d3:74:a9:b1:fb:f2:1f: 0f:52:00:1a:25:f9:b3:c6:69:3e:43:c8:e3:95:cb: 41:af:12:8f:57:72:d3:20:5e:96:54:13:c4:f6:58: dc:b5:b8:57:f3:5b:88:8d:d1:3e:99:67:90:26:eb: bc:f5:a8:ee:36:f5:27:da:ae:6d:87:64:7d:14:c4: ce:a4:00:cc:dd:33:c4:9c:6a:79:d1:bd:07:5b:ba: cf:02:b2:57:b3:f5:83:17:85:d6:e5:80:76:f8:1e: 91:3c:ae:39:b6:61:39:04:2c:7a:df:19:dc:d3:a5: d7:57:4f:6c:e7:ab:6a:cb:7e:10:b1:ac:22:68:27: 33:76:66:c4:49:8d:ad:ec:ed:f1:5d:3d:12:b8:cd: b6:d3:47:5a:0f:7f:c9:48:2a:97:87:91:c6:ac:9f: 84:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BD:9E:86:96:84:98:2C:45:06:22:16:27:FF:C8:89:0C:34:58:10 X509v3 Authority Key Identifier: keyid:A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:e6:a0:c9:02:63:8c:cf:d6:72:af:47:26:75:88:16:92:e0: 29:13:bc:7d:48:d7:a3:85:e2:1d:18:29:b3:11:71:c3:87:39: 83:28:f5:3e:13:5f:70:2d:23:84:c8:1c:ad:58:ba:9a:9e:3a: f9:06:70:2a:d6:17:8d:7c:40:ff:41:4e:62:99:b2:01:08:f9: a6:8a:e2:c3:48:8f:10:19:0c:68:f4:4d:a1:e2:48:0c:08:22: 43:88:2c:bf:ac:b3:a9:a3:5b:5c:bc:c2:cc:19:5c:8c:e5:57: f0:0b:f9:2d:fc:0b:85:7e:d0:b7:77:a0:ba:75:df:c0:d2:5e: 49:47:bd:44:8b:6d:79:18:7b:b4:46:29:79:22:0b:b8:fe:7d: 3c:03:f1:30:1f:5e:9b:73:ef:36:e4:88:f0:20:68:35:3a:6f: 71:b4:ac:eb:c4:c6:1c:28:3e:c1:a9:e7:74:df:a3:b4:13:2e: 12:15:73:83:b2:15:a1:b2:9a:0e:f7:81:fe:87:93:ec:74:ce: 8b:d0:bb:f9:74:2a:b4:1c:0a:0a:0f:37:99:a7:c0:db:9a:c2: e2:65:55:40:40:05:72:86:a9:32:b4:50:42:9d:bc:2b:d5:e2: 2e:5d:88:f7:b2:db:82:50:d5:81:33:c5:d6:f2:1d:c6:0a:be: c2:91:0f:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZGMzMxMTAvBgNVBAUTKEE1NzM3QUQ5NzEzNkRCNTNDMjFCNkYzQjFENEQ3NzFE Q0Q1NzMxM0EwHhcNMjUxMTA1MDAyNjI3WhcNMjUxMTEyMDAyNjI3WjAYMRYwFAYD VQQDEw02OTBhOTliMy02OTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwEfHYicUXRYL2zhaL3V3tywaXZaR41SptMJHRA/snjgX4LLotGoAZKWRX3t osHntV6KNVQX3TBg+wByFFcqJSn1Zh+UFwBP0+G2wIx1lPEYOLx+CFhL3zUDHVDg rYUtOdN0qbH78h8PUgAaJfmzxmk+Q8jjlctBrxKPV3LTIF6WVBPE9ljctbhX81uI jdE+mWeQJuu89ajuNvUn2q5th2R9FMTOpADM3TPEnGp50b0HW7rPArJXs/WDF4XW 5YB2+B6RPK45tmE5BCx63xnc06XXV09s56tqy34QsawiaCczdmbESY2t7O3xXT0S uM2200daD3/JSCqXh5HGrJ+E8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCa9noaW hJgsRQYiFif/yIkMNFgQMB8GA1UdIwQYMBaAFKVzetlxNttTwhtvOx1Ndx3NVzE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkYzMy9CMTY1QkI4QTg1 MTExMUVDQjlEMzM1N0NDNEY5QUUwMi9wWE42MlhFMjIxUENHMjg3SFUxM0hjMVhN VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYTjYyWEUyMjFQQ0cyODdIVTEzSGMxWE1Uby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkYzMy9CMTY1QkI4QTg1MTExMUVDQjlEMzM1N0NDNEY5QUUwMi9wWE42MlhFMjIx UENHMjg3SFUxM0hjMVhNVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ5qDJAmOMz9Zyr0cmdYgWkuApE7x9SNejheIdGCmzEXHDhzmDKPU+ E19wLSOEyBytWLqanjr5BnAq1heNfED/QU5imbIBCPmmiuLDSI8QGQxo9E2h4kgM CCJDiCy/rLOpo1tcvMLMGVyM5VfwC/kt/AuFftC3d6C6dd/A0l5JR71Ei215GHu0 Ril5Igu4/n08A/EwH16bc+825IjwIGg1Om9xtKzrxMYcKD7Bqed036O0Ey4SFXOD shWhspoO94H+h5PsdM6L0Lv5dCq0HAoKDzeZp8DbmsLiZVVAQAVyhqkytFBCnbwr 1eIuXYj3stuCUNWBM8XW8h3GCr7CkQ8x -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:43 2025 by rpki-client